diff --git a/spring-web/src/main/java/org/springframework/web/bind/WebDataBinder.java b/spring-web/src/main/java/org/springframework/web/bind/WebDataBinder.java
index 7f1710cfe87..52abea7e40d 100644
--- a/spring-web/src/main/java/org/springframework/web/bind/WebDataBinder.java
+++ b/spring-web/src/main/java/org/springframework/web/bind/WebDataBinder.java
@@ -227,10 +227,12 @@ public class WebDataBinder extends DataBinder {
 	 */
 	@Override
 	protected void doBind(MutablePropertyValues mpvs) {
+		checkAllowedFields(mpvs);
 		checkFieldDefaults(mpvs);
 		checkFieldMarkers(mpvs);
 		adaptEmptyArrayIndices(mpvs);
-		super.doBind(mpvs);
+		checkRequiredFields(mpvs);
+		applyPropertyValues(mpvs);
 	}
 
 	/**
diff --git a/spring-web/src/test/java/org/springframework/web/bind/support/WebRequestDataBinderTests.java b/spring-web/src/test/java/org/springframework/web/bind/support/WebRequestDataBinderTests.java
index 13eab71b896..2a7c4b826cb 100644
--- a/spring-web/src/test/java/org/springframework/web/bind/support/WebRequestDataBinderTests.java
+++ b/spring-web/src/test/java/org/springframework/web/bind/support/WebRequestDataBinderTests.java
@@ -359,6 +359,23 @@ class WebRequestDataBinderTests {
 		assertThat(Arrays.asList(original)).as("Correct values").isEqualTo(Arrays.asList(values));
 	}
 
+	@Test
+	void defaultArgumentShouldNotTriggerAutoGrowWhenDisallowed() {
+		TestBean tb = new TestBean();
+		tb.setSomeMap(null);
+
+		WebRequestDataBinder binder = new WebRequestDataBinder(tb, "person");
+		binder.setAllowedFields("name");
+
+		MockHttpServletRequest request = new MockHttpServletRequest();
+		request.addParameter("name", "spring");
+		request.addParameter("!someMap[key1]", "test");
+		binder.bind(new ServletWebRequest(request));
+
+		assertThat(tb.getName()).isEqualTo("spring");
+		assertThat(tb.getSomeMap()).isNull();
+	}
+
 
 	public static class EnumHolder {